Binance hackers used fake job interviews and AI tools to steal $6.3B
Original title: Binance says hackers used fake job interviews, AI tool to steal $6.3B
Attackers stole $6.34 billion from Binance using fake developer tool installations and job interview lures that delivered malware into AI tools; 98% of funds replenished.
Binance co-CEO Richard Teng described a months-long infiltration of the wallet infrastructure team that began in June with a tampered Homebrew package and a fake AI coding tool. In September, attackers posed as recruiters and ran a coding exercise containing hidden malware. The breach granted access to internal AI tools and authorized wallet transactions, resulting in over $6.3 billion stolen. Binance has replenished 98% of the assets using company reserves and is tracing remaining funds with partners and law enforcement.
Unconfirmed: FBI link to North Korean hackers tied to TraderTraitor group not confirmed by Binance
- Attack began in June with tampered Homebrew AI coding tool
- September job interviews led to malware in coding exercise
- Access gained through internal AI tools
- 98% of $6.34B recovered; remaining funds illiquid
- Coinbase and other exchanges froze $3B in laundered assets
Impact: stealing $6.34 billion in cryptocurrency from Binance wallet infrastructure
| Product | Affected |
|---|---|
| Binance wallet infrastructure | — |
- 1.Replenish 98% of stolen assets with company reserves
- 2.Trace and freeze remaining funds with law enforcement and industry partners
- 3.Expand security scans and replace compromised devices
- ATT&CK
- T1566.001 Spearphishing AttachmentT1059 Command and Scripting InterpreterT1203 Exploitation for Client Execution
- Vendors
- Binance
- Products
- binance wallet
- Threat actors
- TraderTraitor
- Victims
- Binance
From the original article
2 min read at cnbc.com
Binance said hackers used fake job interviews, malicious software and compromised internal AI tools to infiltrate its wallet infrastructure, leading to the record-breaking Oct. 29 cyberattack that resulted in more than $6 billion in assets being stolen from the world's largest crypto exchange.
By pseudolus · cnbc.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.